Red Hat Security Advisory

RHSA-2020:0703

http-parser security update

Released 2020-03-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) http-parser-2.7.1-8.el7_7.2
Red Hat Enterprise Linux Client Optional (v. 7) http-parser-devel-2.7.1-8.el7_7.2
Red Hat Enterprise Linux ComputeNode (v. 7) http-parser-2.7.1-8.el7_7.2
Red Hat Enterprise Linux ComputeNode Optional (v. 7) http-parser-devel-2.7.1-8.el7_7.2
Red Hat Enterprise Linux Server (v. 7) http-parser-2.7.1-8.el7_7.2, http-parser-2.7.1-8.el7_7.2.ppc
Red Hat Enterprise Linux Server Optional (v. 7) http-parser-devel-2.7.1-8.el7_7.2, http-parser-devel-2.7.1-8.el7_7.2.ppc
Red Hat Enterprise Linux Workstation (v. 7) http-parser-2.7.1-8.el7_7.2
Red Hat Enterprise Linux Workstation Optional (v. 7) http-parser-devel-2.7.1-8.el7_7.2

TI-2019-11704 CVE-2019-15605 · GHSA-rv6p-2q56-m955

HIGH 75

HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.57132 Published 2020-02-07 Fixed in 10.19.0, 12.15.0 +1 CWE-444